7.5high
CVE-2000-0982in critical feed
Internet Explorer before 5.5 forwards cached user credentials for a secure web site to insecure pages on the same web site, which could all…
Published 25 y ago · modified 45 d ago · JSON
CVSS
7.5
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
12.6%
percentile 96%
Public exploits
0
none known
Summary
Internet Explorer before 5.5 forwards cached user credentials for a secure web site to insecure pages on the same web site, which could allow remote attackers to obtain the credentials by monitoring connections to the web server, aka the "Cached Web Credentials" vulnerability.
Exploit prediction (EPSS)
12.61% probability of exploitation in the next 30 days, higher than 96% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
References
- securityfocus.com /bid/1793 · vdb-entry, x_refsource_BID, x_transferred
- acrossecurity.com /aspr/ASPR-2000-07-22-2-PUB.txt · x_refsource_MISC, x_transferred
- exchange.xforce.ibmcloud.com /vulnerabilities/5367 · vdb-entry, x_refsource_XF, x_transferred
- docs.microsoft.com /en-us/security-updates/securitybulletins/2000/ms00-076 · vendor-advisory, x_refsource_MS, x_transferred
Sources
- CVE List: CVE-2000-0982
- NVD: CVE-2000-0982
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.